BashScript to check all subfolders for compromised dependency (https://github.com/dominictarr/event-stream/issues/116)

recursive_check.sh

#!/bin/bash

function recursiveCheck() {
    for d in * ; do
        if  [ $d == "node_modules" ] ; then
            #echo "Skipping $PWD"
        else if [ -d "$d" ]; then
                cd "$d"
                #echo "Checking $PWD"
                if [ -f "package.json" ];
                then
                    npm ls event-stream flatmap-stream
                else
                    recursiveCheck
                fi
                cd ..
            fi
        fi
    done
}

recursiveCheck

It didn't work for me on Mac, so I edited this a bit:

Run from home dir, found one project that used the package as a dev-dependency. Thanks a lot!

#!/bin/bash

function recursiveCheck() {

for d in * ; do
    if [ -d "$d" ];
    then
        # echo "checking $d"
        cd "$d"
        if [ -d ".git" ];
            then
                npm ls event-stream flatmap-stream
            else 
                recursiveCheck
            fi
        cd ..
    fi
done

}

recursiveCheck

Thanks. I'll add that and changes recommended by @luchsamapparat (dominictarr/event-stream#116 (comment)) to a new revision